update search command to use FTS5 SQLite table for complex searches
This commit is contained in:
parent
d839089153
commit
167829704a
8 changed files with 1359 additions and 267 deletions
|
@ -30,21 +30,14 @@ const commandPatterns = [
|
|||
module: 'sigma',
|
||||
params: [2] // rule ID is in capturing group 2
|
||||
},
|
||||
|
||||
|
||||
// Sigma search patterns
|
||||
{
|
||||
name: 'sigma-search',
|
||||
regex: /^(search|find|look\s+for)\s+(rules|detections)?\s*(in|from)?\s*sigma\s+(for|where|with)?\s+(.+)$/i,
|
||||
action: 'search',
|
||||
regex: /^(search|find)\s+(sigma\s+)?(rules|detections)?\s*(where|with)\s+(.+)$/i,
|
||||
action: 'complexSearch',
|
||||
module: 'sigma',
|
||||
params: [5] // search query is in capturing group 5
|
||||
},
|
||||
{
|
||||
name: 'sigma-search-simple',
|
||||
regex: /^(search|find)\s+(.+)$/i,
|
||||
action: 'search',
|
||||
module: 'sigma',
|
||||
params: [2] // search query is in capturing group 2
|
||||
params: [5] // complex query conditions in capturing group 5
|
||||
},
|
||||
|
||||
// Sigma create patterns
|
||||
|
@ -55,7 +48,7 @@ const commandPatterns = [
|
|||
module: 'sigma',
|
||||
params: [2] // rule ID is in capturing group 2
|
||||
},
|
||||
|
||||
|
||||
// Sigma stats patterns
|
||||
{
|
||||
name: 'sigma-stats-first',
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue